Redact for Public Disclosure

功能

• Category-based fact classification
• Version-lag policy for findings
• Maintainable deny-list scanner script
• Private/public file-set split via allow-list
• Orphan-commit publishing for Git history isolation
• CI gate to block merges with denied patterns

使用场景

• Publishing methodology findings about closed-source software
• Preparing upstream proposals or bug reports
• Archiving private research repos for public reference
• Cleaning up research drafts before publication

非目标

• Performing actual reverse-engineering
• Handling or encrypting sensitive data (focus is on removal)
• Automating the creation of public content beyond redaction and sync

工作流

1. Categorize all candidate facts (methodology, generic pattern, version-specific, live internal)
2. Set version-lag cool-off policy
3. Build and maintain the deny-list scanner
4. Maintain the deny-list before drafting content
5. Establish private/public file-set split via allow-list
6. Publish via orphan commit to the public mirror
7. Wire CI gate to run redaction scanner on commits
8. Handle false positives by tightening patterns
9. Perform periodic redaction sweeps

实践

• Research Disclosure
• Secure Publishing
• Information Redaction
• CI/CD Automation

先决条件

• A private research repo with mixed-sensitivity content
• A target public mirror repo or worktree
• Git installed and configured
• Bash shell environment
• ripgrep (rg) installed (or grep fallback)